About monitor iphone application internet (http) traffic - ios

I hope someone here had the question. I want to monitor one of iphone's application' internet (http) traffic, I know the application sends out http request but I can't monitoring them, so now what tool I should use?
I tried fiddler but it seems the I can only get the first few request, I lose the traffic right after I logged in within that application.
So I can use fiddler to monitor iphone's browser traffice without any issue, but for applications I can't.

Try Charles HTTP proxy debugger. There's even a section in the help for iOS applications.
If you want to debug HTTPS traffic as well you'll need to right click on the requests in the list and select SSL proxying and then re-attempt the request.

Related

See http requests an app iOS (security)

I'm currently developing my app, developer and a friend told me that have saw all the http requests with the parameter (AFNetworking), how to hide this? And see how these requests? Thank you
Your app should connect to web services over an HTTPS connection. And Apple will require HTTPS connections for iOS apps by the end of 2016.
Check Apple's documentation : Using Networking Securely

App rejected for lack of IPv6, is this a server or app issue?

Apple rejected an app because it didnt work on their IPv6 network. I've managed to test this on my end using an ipv6 only address and can see that the third party API i'm using is unreachable when using an IPv6-only address.
Any time i try to use the API I get the response
A server with the specified hostname could not be found
The same thing happens if I manually go the URL in safari, whereas other IPv6-ready sites like gmail etc work.
So my question is do I need to get the developers of the API I'm querying to update their servers to support IPv6 in order to get this working, or is there something I should be doing on the app side in order to make this work?
There's no need to change any external servers. It's all about the client. If by this "third party API" you mean they have a library which you include into your app, then perhaps they are doing something in their code that is not working correctly; if this is the case, then you need to ask them to fix their client library.

Does Twilio HTTP requests support the SSL configuration of Universal SSL - which uses SNI and ECDSA?

I have set up an API endpoint on my Digital Ocean VPS to receive incoming SMS to my Twilio number. It was working.
Then I started using CloudFlare. I believe that it stopped working after that, but since I receive SMS so infrequently, I am not absolutely sure. Although Twilio's website indicates that they sent an HTTP request and received a 502 Bad Gateway error, my server logs never registered any incoming requests from Twilio. I know that my API endpoint works because when I manually enter the API endpoint in my Chrome browser, my server receives it and logs the GET request as expected.
I tried asking Twilio's support for the full details of the supposedly failed request, but they refuse to give it to me.
Does anyone know which setting in CloudFlare to adjust that may fix this? I've tried turning off and reducing all the security settings as I thought it may be a firewall issue. How else can I go about debugging this problem without turning off CloudFlare completely (I need it on for other purposes)? I will accept the first answer or advice that leads to the solution. Thanks!
EDIT: this is the response from CloudFlare
One thing to ask them, is whether they support the SSL configuration
of Universal SSL - which uses SNI and ECDSA. We have seen instances of
3rd party services not supporting one or both of these, and therefore
failing to make calls via HTTPS.
Universal SSL support is defined by the client machine's support for
two newer features:
Server Name Indication (SNI) Elliptic Curve certificates (ECDSA) What
browsers work with Universal SSL?
If you need broader browser compatibility for older browsers/operating
systems, our Pro plan plan provides this.
Also, if you want to get full information about what your browser
supports, this site will run a check on your browser and tell you the
support your browser has for protocols, ciphers and SNI:
https://cc.dcsec.uni-hannover.de/
Twilio developer evangelist here.
Good news, Twilio now supports SNI! So, this should no longer be a problem.
You might want to check Server Name Indication (SNI) Twilio does not support this, so as a result you get 502 Bad Gateway. Same thing was happening to me. I was able to fix this using Cloud flare Pro see this post
Twilio - TwiML with SNI Support

What API does iOS have to write Web proxy?

Does IOS provide API to write a proxy program for IPad /IPhone to process web requests from Safari, Chrome, Firefox and also apps that work with UIWebView?
Can this proxy also work as a daemon? I need this proxy to periodically create web usage statistics and generate summary reports.

Proxy from iPhone to desktop running Fiddler some https fails

I am successfully seeing https traffic from a proxy setup on an iPhone to a wifi network so that it is routed through a desktop running fiddler. However, some http requests fail. I have all items checked under options > https. Ideas?
See http://groups.google.com/group/httpfiddler/browse_thread/thread/55b865509faaf119
Short answer is that a different certificate generation strategy is needed to interoperate with iOS based products. This will be coming in the next few weeks.

Resources